Legal

Privacy Policy

Last updated: March 1, 2026. This is the plain-language version. If anything here contradicts the full legal terms in our DPA, the DPA wins.

The short version

What we collect

Account data. Your name, email, and password hash. If you sign in with Google, we receive the profile fields Google shares (name, email, avatar).

Uploaded material. Any files, notes, or URLs you add to a StudyPod. This includes the extracted text and any generated notes, cards, and quizzes.

Usage data. Which topics you studied, quiz results, flashcard confidence, and chat interactions. We use these signals to compute mastery and drive adaptive study.

Device data. Standard server logs — IP, user agent, timestamps — retained for 30 days for security.

How we use it

What we don't do

Sub-processors

We use a small set of well-known vendors to host, process, and secure the service. The current list is on our Trust page, along with what each vendor does.

Your rights

You can export all of your StudyPod data as JSON from Settings, and you can delete your account and all associated data with one click. Deletions propagate within 30 days across all systems, including backups. If you're covered by GDPR, CCPA, or similar law, you can also request a copy of your data by emailing privacy@studypod.app.

Children

StudyPod on the consumer plan is intended for users 13 and older. Younger students access StudyPod only through a school or district license, which is governed by our K-12 DPA and complies with FERPA and COPPA.

Contact

Privacy questions: privacy@studypod.app. Data protection officer: dpo@studypod.app.